Browse / Sorare

Sorare

See its reports on the map

Attack surface: 39 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Sorare

• Denial of Service2
• Cryptography1
• Injection and Smuggling1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Unsufficent input verification leads to DoS and resource consumptionUncontrolled Resource Consumption · low
   $300108 votes
2. Circular based introspetion Query leading to single request denial of service and cost consumption and query cost on api.sorare.com/graphqlUncontrolled Resource Consumption · medium
   57 votes
3. Mystery with a leaked token and Reusability of email confirmation link leading to Account TakeoverInadequate Encryption Strength · low
   $30049 votes
4. Operation CreateOrUpdateSo5LineupMutation does not restrict multiple captainsImproper Input Validation · low
   $30023 votes